$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft File: D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft (raw, json) Hash identifier: 2b5FwCjX0VPasKn7GpbwVCXN3f1wMQ9fix+cfWH0XXU= Subject key identifier: 89:AC:A9:42:36:8A:9F:76:36:77:22:68:F9:2C:2D:A2:CF:08:7C:85 Authority key identifier: D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72 Certificate issuer: /CN=A9120CDE0000/serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472 Certificate serial: 0D1ABDBF590415EF657D1177874BC89D336ECF1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft Manifest number: 49 Signing time: Sun 26 Jul 2026 22:21:29 +0000 Manifest this update: Sun 26 Jul 2026 22:16:29 +0000 Manifest next update: Tue 28 Jul 2026 01:35:29 +0000 Files and hashes: 1: 3130332e3132332e342e302f32332d3233203d3e2034383337.roa (hash: k74aKc9hrGjjKtFfU03UFmb5lbVypa9TVHs7t7K9DFc=) 2: D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl (hash: D+Vo/7CDgJLHqTBLCKQfnZ+WTUxxLxuDxemHEvyi9Fk=) 3: 3130332e3132332e342e302f32322d3232203d3e2034383337.roa (hash: uzVKo4gitP7RigvC6WVexzNZzL0YYShPIrlVbSuh1Mw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 01:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1a:bd:bf:59:04:15:ef:65:7d:11:77:87:4b:c8:9d:33:6e:cf:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120CDE0000, serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472 Validity Not Before: Jul 26 22:16:29 2026 GMT Not After : Jul 28 01:35:29 2026 GMT Subject: CN=89ACA942368A9F7636772268F92C2DA2CF087C85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:79:10:68:5a:ba:32:14:29:5e:2b:b4:80:5d: c1:25:07:8e:3a:a5:34:6a:d5:44:1a:98:a5:e9:25: 9f:7d:9d:77:85:84:8e:fe:3a:70:13:76:78:9c:0b: 22:f6:8b:fd:c4:04:a3:ff:7a:3e:78:47:e5:a9:4a: 4e:ea:8d:3c:15:20:31:9b:aa:81:43:b7:88:a9:97: ad:63:62:38:59:82:4f:91:90:24:6f:94:79:e0:92: 43:03:3f:eb:ca:05:da:24:3d:c5:e9:64:04:cc:7f: 6f:98:63:68:de:14:20:f1:6a:ec:6e:cd:1d:3d:4b: eb:e3:1c:6a:96:13:6b:99:82:84:d4:e1:cf:a2:b8: 84:14:65:91:4f:d0:ca:ad:2b:0f:df:de:64:3f:2d: 4c:a6:32:c5:6c:31:02:03:1e:b2:e1:a9:44:01:32: ac:e7:b0:95:3e:5f:7a:1a:f6:ef:aa:cb:14:fa:31: a0:f5:a2:94:c5:c0:4a:bf:6b:78:f1:b0:64:5c:5f: 3f:d6:33:c3:2c:c7:01:69:7a:25:44:a8:cb:1e:42: 12:e1:65:ca:2f:0d:a1:dc:af:a0:d5:30:8b:7d:2e: 72:6a:25:b5:3b:c7:5a:9c:f1:3c:4a:81:d2:1a:7c: 28:9b:1b:10:03:f3:a7:8d:ae:6e:60:1f:f1:d1:df: fb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AC:A9:42:36:8A:9F:76:36:77:22:68:F9:2C:2D:A2:CF:08:7C:85 X509v3 Authority Key Identifier: keyid:D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:6e:fe:d8:5f:41:83:c4:42:97:59:4a:09:22:e1:c3:91:8a: 4c:f1:1a:11:00:b2:61:53:51:36:50:a9:44:66:8a:10:94:f0: c2:ab:02:a1:bb:e7:24:0b:cf:b9:d3:13:67:e8:95:f1:4d:08: 76:b8:81:5a:e7:ce:a4:69:5d:61:83:f1:49:27:1c:3a:24:2b: e3:11:79:1b:46:6d:17:f8:76:0c:1f:bd:68:70:88:9b:7b:b8: f4:68:e2:a2:7d:9a:fd:00:81:b4:49:2a:c1:a3:74:63:a0:22: e6:65:dd:ba:a8:1e:0e:0b:63:38:93:79:f4:5b:de:ee:c6:df: fc:5f:e4:fb:a6:07:b1:69:5b:be:af:fc:48:ca:0f:2b:ce:2e: cc:a2:bd:7a:9f:73:89:9c:f1:5f:d8:4f:59:85:40:3d:04:54: a5:b9:62:81:ca:36:1e:bf:56:c5:36:80:61:b6:b3:fb:d8:5b: ed:e5:4a:ed:46:70:1d:0e:3d:7c:17:00:8a:ab:ec:65:60:0d: 12:6d:74:c1:3d:9e:72:ad:55:79:c6:2d:f6:f0:d6:98:8c:95: f7:b6:0b:43:20:14:86:95:54:4d:7d:48:cf:21:6a:06:2f:e5: 45:ae:c9:f9:59:34:d5:a9:ec:50:ec:db:e4:cb:8f:e4:38:04: d8:a3:2b:91 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDRq9v1kEFe9lfRF3h0vInTNuzxowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjBDREUwMDAwMTEwLwYDVQQFEyhEMEVBMEFBOEMz NDZGRTY3M0M2ODY3RjJCOUNBMDY4MTlGNThDNDcyMB4XDTI2MDcyNjIyMTYyOVoX DTI2MDcyODAxMzUyOVowMzExMC8GA1UEAxMoODlBQ0E5NDIzNjhBOUY3NjM2Nzcy MjY4RjkyQzJEQTJDRjA4N0M4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAON5EGhaujIUKV4rtIBdwSUHjjqlNGrVRBqYpekln32dd4WEjv46cBN2eJwL IvaL/cQEo/96PnhH5alKTuqNPBUgMZuqgUO3iKmXrWNiOFmCT5GQJG+UeeCSQwM/ 68oF2iQ9xelkBMx/b5hjaN4UIPFq7G7NHT1L6+McapYTa5mChNThz6K4hBRlkU/Q yq0rD9/eZD8tTKYyxWwxAgMesuGpRAEyrOewlT5fehr276rLFPoxoPWilMXASr9r ePGwZFxfP9YzwyzHAWl6JUSoyx5CEuFlyi8NodyvoNUwi30ucmoltTvHWpzxPEqB 0hp8KJsbEAPzp42ubmAf8dHf+5kCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBSJrKlC NoqfdjZ3Imj5LC2izwh8hTAfBgNVHSMEGDAWgBTQ6gqow0b+ZzxoZ/K5ygaBn1jE cjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMzIyMTk3ODgxNDIxODQxLzAvRDBFQTBB QThDMzQ2RkU2NzNDNjg2N0YyQjlDQTA2ODE5RjU4QzQ3Mi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvME9vS3FNTkdf bWM4YUdmeXVjb0dnWjlZeEhJLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMjMyMjE5Nzg4 MTQyMTg0MS8wL0QwRUEwQUE4QzM0NkZFNjczQzY4NjdGMkI5Q0EwNjgxOUY1OEM0 NzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQCvbv7YX0GDxEKXWUoJIuHDkYpM8RoRALJhU1E2UKlEZooQ lPDCqwKhu+ckC8+50xNn6JXxTQh2uIFa586kaV1hg/FJJxw6JCvjEXkbRm0X+HYM H71ocIibe7j0aOKifZr9AIG0SSrBo3RjoCLmZd26qB4OC2M4k3n0W97uxt/8X+T7 pgexaVu+r/xIyg8rzi7Mor16n3OJnPFf2E9ZhUA9BFSluWKByjYev1bFNoBhtrP7 2Fvt5UrtRnAdDj18FwCKq+xlYA0SbXTBPZ5yrVV5xi328NaYjJX3tgtDIBSGlVRN fUjPIWoGL+VFrsn5WTTVqexQ7Nvky4/kOATYoyuR -----END CERTIFICATE-----Generated at Mon Jul 27 16:54:20 2026 by rpki-client